[benlumen]

Data theft like that is normally silently dumped after the breach occurs and anyone knows what happened.

This looks more like data injection somewhere. Perhaps an old API exploit. You used to be able to send an SMS to tweet, for example.

[Nextgrid]

Kill 2 birds with one stone? Once you stole the data why not double-dip and make extra money by pulling a scam?